[Info-vax] Rethinking DECNET ?

David Froble davef at tsoft-inc.com
Mon Sep 1 15:06:52 EDT 2014


Simon Clubley wrote:
> On 2014-08-31, David Froble <davef at tsoft-inc.com> wrote:
>> Simon Clubley wrote:
>>> DECnet is a whole range of protocols just like TCP/IP is and while
>>> the basic TCP and IP layers do not have encryption built in, there
>>> are other layers, within the protocol stack, which do give you that
>>> capability. You can even choose per-site or per-session encryption
>>> as you wish.
>>>
>>> DECnet has no such equivalent to those protocol layers.
>>>
>> I would suggest that SSL is not part of TCP/IP.  Of course people can 
>> choose to group things as they wish.  But, Brian is correct, TCP/IP does 
>> not have encryption, except as layered on top of TCP/IP, and I'll argue 
>> that it's a separate product.
> 
> What about IPsec ?
> 
> That encapsulates TCP/UDP or IP packets (depending on which
> communications option is chosen) and hence does not sit on
> top of TCP but underneath it.
> 
> As mentioned above, TCP doesn't have encryption built in, but the
> layer which lives below it, IPsec, does.
> 
> Simon.
> 

And here I thought the venue was c.o.VMS ....



More information about the Info-vax mailing list